Following the Microsoft 365 outage, we want to make you aware of a scam targeting universities and other organisations. Reports from IT security teams indicate that fraudsters are phoning people while pretending to be Microsoft engineers. They claim to be calling to fix email or account problems and ask for your username, password or other login details. This type of phone scam is known as "vishing". The same approach may also be used in emails and text messages.
How to stay safe:
- Never share your password, multi-factor authentication (MFA) codes or approval prompts with anyone, including someone claiming to be from Microsoft or from the University.
- Microsoft and University IT Services will never phone, email or text you to ask for your login details.
- Be wary of unexpected calls, emails or messages that create urgency or pressure you to act quickly.
- Do not click on links or open attachments in unexpected messages about your account or email problems.
- Do not approve any MFA request that you did not initiate yourself.
If you receive a suspicious call, hang up. If you receive a suspicious email or message, do not reply or click anything. Report it to IT Services https://www.sussex.ac.uk/its/help/
If you think you may have shared your login details or approved an unexpected MFA request, please change your password immediately and contact ITS as soon as possible. Reporting quickly helps us protect you and the University.
For the latest information, please check the Staff Hub, Student Hub and Sussex Mobile Alerts.
Thank you for staying vigilant.
IT Services